My previous RSA 2012 call for action, security IQ, compared information security to heavily regulated and competitive industries such as the drugs and aviation industries, calling for a standard qualification mechanism, governmental or academic.
However, this may not be the only model the information security should take to ensure we are all better prepared for future security challenges. An alternative approach is to deviate to some degree from the commercially centric nature of the industry and work more closely together.
The question is what should be the model? A Leviathan model may provide the best security but is too utopian for an area which is mostly commercially driven....
In recent weeks I have met several companies focusing on innovating security intelligence. Those encounters brought up an interesting challenge facing such innovations: in most cases innovators have a good idea but find it too expensive to build the required infrastructure. There is no use for an icing for a cake you cannot bake after all. 
